What is the purpose of our Personal data protection policy?

Our company, Yves Rocher UK, is keen to remind you of its commitment to respecting the trust that you place in it and to applying the personal data protection regulation in place in United Kingdom and the European Union.
This Personal data protection policy lays down the terms and conditions under which Yves Rocher United Kingdom, in its role as a controller, collects and uses your personal data. It complements the information that is brought to your attention when you provide us with your data when completing a form to create a customer account on one of our Internet sites.
This Policy applies to the data collected by post or by telephone when you contact our customer service department and when you use our sites. It consists of rules that apply to the personal data of all of our customers and prospects, regardless of the channel used to collect this data.
The Policy may be accessed by anyone and at any time here We invite you to read it carefully and to refer to it on a regular basis.

What data is processed?

We may have to process the following type of personal data:
- Data regarding your identity: title, surname, first name, address, date of birth, etc.
- Contact data: address, telephone number, E-mail address, etc.
- Financial data: information connected to methods of payment, etc.
- Sales-related data: customer number, purchasing history, information concerning your customer account and your loyalty account, opinions on our products, customer segment, etc.
- Technical data: connection data, browsing history, login and password, etc.
This data depends on how you interact with our company: if you create a customer account on one of our sites, place an order by post or online, subscribe to the Newsletter, contact the customer service department, etc. and if you use our services, our sites.
You are informed whether you have to or do not have to provide your data when it is being collected. Failure to send a piece of information that is mandatory will stop us from fulfilling your request. For example, to deliver your order, we must have your delivery address.

Why do we process your data?

For each processing operation, we only collect and use data that is relevant and necessary for the aim of the operation.
- We process your data in order to fulfil a contract with you: recording and executing your orders, providing the services to which you have subscribed, processing your requests and complaints, providing an after-sales service, recovering any outstanding payments.
- We also use your data for other purposes that form part of our legitimate interests, while ensuring that we always respect your rights and interests, and, when necessary, after you have given your express approval: managing and improving customer relations, improving your experience when you use our Internet sites, implementing direct marketing operations and sending you offers that match your needs, sending you letters and promotional offers, carrying out statistical analyses, managing and publishing customer opinions regarding our products, preventing misuse and fraud, informing you of new services or changes to our sites.
- Your data is also used to ensure that we respect our legal or regulatory obligations.
The length of time your personal data is kept depends on the purpose for which it is used.

Are you going to receive promotional offers?

In accordance with the choices that you have made, we may use your contact details to send you sales offers, particularly by post, telephone or E-mail. Offers by post or telephone: We may send you offers by post or contact you by telephone to tell you about product and service offers. Offers by E-mail or text: You may receive offers by E-mail regarding our products and services, as well as offers regarding the products and services of partner companies, subject to your consent, which you may withdraw at any time. If you have provided us with your data when placing an order or creating a customer account, and as long as you do not object, we may send you offers for our products and services. You may object to receiving these offers at any time. - In the case of our E-mail offers: click on the unsubscribe link that appears in each E-mail or go to your customer account on our website or contact our customer service department.

Who will receive your data?

For the aforementioned purposes, duly authorised personnel within Yves Rocher United Kingdom, its service providers, partners and subcontractors, will receive your personal data. Data may also be sent to the competent authorities on their request or to ensure that we comply with other legal obligations.

How do we ensure the security of your data?

We commit ourselves to ensuring the security and confidentiality of your personal data by implementing suitable technical and organisational measures that stop your data from being lost, accidentally destroyed, incorrectly used or accessed by any unauthorised individual or body.

Is your data processed outside of the EU?

We may have to transfer your data to a country located outside the European Union. In this situation, we make sure that the data processing operations meet a level of personal data protection that corresponds to the level required by the regulation.

What are your rights?

In accordance with the applicable regulation, you have various rights that you may exercise at any time: You have a right of access, a right to rectification, a right to erasure of personal data that concerns you, as well as a right to ask us to transmit data that you have given to us (‘right to data portability’). You have the right to object on the basis of legitimate grounds to processing operations that concern your data, or to request restrictions to these processing operations. You also have the right to object, at any time and without providing a reason, to the processing of your data for the purpose of direct marketing, as well as to profiling when it is carried out for this purpose. You have the right to provide instructions on what is to be done with your personal data after your death.

How can you exercise your rights?

ITo exercise any of your rights, just write to the customer service department at the following address: YVES ROCHER UK – 1 Apollo Rise, Southwood, Farnborough, GU14 OGT, or send an E-mail to:, specifying your surname, first name, address and you customer number and including proof of identity (two-sided copy that lets us verify the identity of the person making the request). We will respond to your request within one month as from the moment your complete request is received. We reserve the right not to act on requests that are manifestly unfounded or excessive. Groupe Rocher, to which our company belongs, has appointed a Data protection manager, who shall be designated as the Data Protection Officer (DPO), whose role is to ensure that the applicable regulation and the rules laid down in this Policy are respected. We shall take all necessary measures to ensure your personal data rights are respected. If, however, you believe that these rights have not been respected, you may file a complaint with the United Kingdom data protection authority (ICO), whose role is to ensure the Regulation applicable to the processing of personal data is respected in United Kingdom:

How do we use cookies?

To find out more about our commitments to the use of your browsing data, please see our policy on Cookies here

How can you remain informed about changes to our Personal data protection policy?

We shall update this Policy as often as necessary. The Policy is made available to everyone on our website and it covers the relationship between consumers and Yves Rocher UK regardless of the framework of the relationship: Internet, post or telephone.

Last updated 01/06/2018